---
title: Syslog Event Destination
slug: ps/help/en_us/vwaf/ag/syslog-event-destination
docTags: 
createdAt: 2026-08-02T10:05:41.376Z
---

## Purpose

In case of an alert, sends a notification to a syslog server.

:::hint{type="info"}
For more information regarding adding and editing Event Destinations, see [Editing Event Destinations](docId\:kc_vICP9c8VXtxgZ6wEn5).
:::

## Attributes

| Attribute        | Meaning                                                                                                              |
| ---------------- | -------------------------------------------------------------------------------------------------------------------- |
| use tcp          | Activate this option if you want vWAF to use TCP instead of the UDP protocol for transmission.                       |
| source addr      | Can be used to specify the source host\[:port].<br />When left empty, vWAF automatically inserts appropriate values. |
| destination addr | Specifies the destination host\[:port].<br />If you don't specify a port number, vWAF uses port 514 by default.      |